PT-2022-21590 · Apple+4 · Safari+6

Binoy Chitale + 5 · Published 2022-07-20 · Updated 2024-06-12 · CVE-2022-32933

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS Monterey versions prior to 12.5

Description An information disclosure issue was addressed by removing the vulnerable code. This issue allows a website to track the websites a user visited in Safari private browsing mode.

Recommendations For macOS Monterey versions prior to 12.5, update to macOS Monterey 12.5 to resolve the issue. As a temporary workaround, consider restricting the use of Safari private browsing mode until the update is applied.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CESA-2023_7055

CVE-2022-32933

DSA-5240-1

DSA-5241-1

OPENSUSE-SU-2023_4561-1

RHSA-2023:6535

RHSA-2023:7055

RHSA-2023_6535

RHSA-2023_7055

RHSA-2025:10364

SUSE-SU-2023:4558-1

SUSE-SU-2023:4559-1

SUSE-SU-2023:4561-1

SUSE-SU-2023:4651-1

Affected Products

Astra Linux

Centos

Apple Macos

Red Hat

Safari

Suse

Macos Monterey

References · 33

• https://osv.dev/vulnerability/DSA-5240-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-32933 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-32933 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-32933 · Security Note
• https://osv.dev/vulnerability/DSA-5241-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32933 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-32933 · Vendor Advisory
• https://support.apple.com/en-us/HT213345 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-32933 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4558-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4561-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4559-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4651-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-32933 · Vendor Advisory
• https://bugzilla.suse.com/1216778 · Note